![\"Cisco](\"\/wp-content\/themes\/learncisco\/assets\/images\/icnd2\/075-cisco-ios-hierarchy.jpg\" "\\"Cisco")
<\/p>\nHere’s the thing you need to understand, we’re now going to have an operating system that can pretty much do it all, but does that mean we can do it all? No. We’ve got to get a Product Activation Key, or PAK, that we load into our chassis that is based on a feature that we have purchased, okay. This is going to allow us to get a license and that license is then applied, installed in the chassis, and that gives us a feature. For instance, I want to do Voice over IP, or VoIP. A lot of routers can do that. You got things like unity, you have Call Manager Express, we’re going to be doing this sort of thing. And so we have to be mindful of this elevated management workflow that is now our burden, our responsibility, as the people who interface with these router chassis.<\/p>\n
<\/p>\n
So back in the days when we started, this is what we had available to us. Not specifically, this exact set of operating systems because they have evolved over time. All right, we just need basic functionality, let’s grab the bottom one. We want to add voice, let’s grab IP Voice. Security, different service provider (SP) services, or full load enterprise services, you purchased the OS you needed.<\/span><\/p>\n We have this universal image, which replaces everything that we had before. And once this universal image is on our device, what does it have? Well by default, it’s going to have the base image, base image comes with it. So just basic IOS functionality. But from there, this is where we purchased those licenses. So do I want to provide some MPLS support? I have to get the license for that. What about voice over IP, or VoIP? Got to get the license for that. Some security features, VPNs, Internet Protocol Security, or IPsec, firewall support? Got to pay for that as well. So when you purchase your device you just have this one IOS image, but then you unlock the different features by paying for the licenses for those different features.<\/p>\n So here we can see that example looking at the output of show license. Right now, what do we have currently active on this device in use?<\/p>\n It’s just the base, I’m looking here, and I don’t see that the security package is active and the rest of it is omitted. But this would go through all of these different packages, show us the licenses, and then that might explain why, hey, I can’t configure Context-Based Access Control, or CBAC, on my router. CBAC being a security thing, but you got the idea.<\/p>\n We do need to get these license files installed in Flash. We also want to back them up too, right? But get them installed in Flash, but just their existence in Flash does not suffice to install license. This is a permanent license.<\/p>\n R1#license install flash0:uck9-2900-SPE150_K9-FHH12250057.xml Some licenses do have a certain amount of time and you have to be mindful of the way the time works in some of the licensing environments too. Sometimes, they’re cumulative, sometimes they’re not. But in any case, this is a permanent one and we’re basically to say, “Hey, I got this license here you go.” And what does it look like? Looks like unified communications, so to me this looks like a VoIP license that I’m installing inside of my chassis. So I can do things like work as an IP telephony gateway, and then I’m going to reload, and I’m going to do that show license again to see exactly what licenses are running on the chassis.<\/p>\n Can we try out a feature set before we decide to purchase the real deal? Yes. Cisco does have the ability to utilize evaluation licenses, a slightly different command as you can see here for that license.<\/p>\n R1#license boot module c2900 technology-package uck9 So license boot module in order for us to activate that particular evaluation license, and typically, we’re dealing with a 30-day evaluation license. In this case, this is looking to me like we are installing a unified communications evaluation license here as well.<\/p>\n Whatever you do, don’t do this for production gear. You can lab this up with these evaluations. But don’t put it into production because that’s really going to burn you. It’s better to, you know, be relatively reactionary and go oh, you know, I can’t do that right now than to have it work and then stop working because a licensed feature has died because it was an evaluation. This is the paradigm and predicament we can get ourselves into on a lot of different chassis. If we want to verify how much time is left in this evaluation license, we can verify that using the show licenses command as well. So not only does that provide us with the permanent licenses we have but also the evaluation licenses and the time period remaining on them.<\/p>\n This functionality of backing up the license is kind of… you know, for me it’s not really a backing up in the true, strictest sense of the word because it’s still just local to the chassis. But it’s a great command to do, don’t get me wrong.<\/p>\n R1#license save flash:all_licenses.lic<\/p><\/blockquote>\n So here you’re saying, “Hey, here is license file I want you to save it to.” And you’ve created a local copy of your license files.<\/p>\n At some point in time, we may no longer require the license that is installed on our router. So what do we do to remove it? Well there are three things we have to do. First and foremost, we have to disable the technology package. We’re doing that here with the license boot module command. But I want you to look at the end, what did we type in? Disable, disable!<\/p>\n Router(config)#license boot module c3900 technology-package uck9 disable And then notice we had to reload the device. We reloaded the device so that way there we were no longer using that particular technology package. But now we have to remove the license itself. So once the router is reloaded and we’re back in the privileged EXEC mode, we can say license clear and then the particular license we want to remove. In this case, the uck9 license.<\/p>\n Router#license clear uck9 But then, we typed in a command earlier to disable the technology package, right? That command above license boot module disable at the end. Do we need that anymore, is it required?<\/p>\n\n\n
\n Technology Package License<\/th>\n Features<\/th>\n<\/tr>\n \n IPBase<\/td>\n Entry-level IOS functionality<\/td>\n<\/tr>\n \n DATA<\/td>\n MPLS, ATM, Multiprotocol support<\/td>\n<\/tr>\n \n Unified Communications<\/td>\n VoIP, IP Telephony<\/td>\n<\/tr>\n \n Security<\/td>\n IOS Firewall, IPS, IPSec, 3DES, VPN<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n
Router#show license<\/div>\nIndex 1 Feature: ipbasek9<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Period left: Life time<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License Type: Permanent<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License State: Active, In Use<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License Count: Non-Counted<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License Priority: Medium<\/div>\nIndex 2 Feature: securityk9<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Period left: Not Activated<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Period used: 0 minute 0 second<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License Type: EvalRightToUse<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License State: Not in Use, EULA not accepted<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License Count: Non-Counted<\/div>\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0License Priority: Non…<\/div>\n<\/blockquote>\nPermanent license installation<\/h2>\n
\nR1#reload<\/p><\/blockquote>\nEvaluation license installation<\/h2>\n
\nR1#reload<\/p><\/blockquote>\nBacking up and uninstalling the license<\/h2>\n
\nRouter(config)#exit
\nRouter#reload<\/p><\/blockquote>\n
\nRouter#configure terminal
\nRouter(config)#no license boot module c3900 technology uck9 disable
\nRouter(config)exit
\nRouter#reload<\/p><\/blockquote>\n